Lucene search
PRIOn knowledge basePRION:CVE-2024-1291HistoryMar 13, 2024 - 4:15 p.m.
Cross site scripting
2024-03-1316:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
brizy
page builder
stored cross-site scripting
vulnerable
countdown url
input sanitization
output escaping
authenticated attackers
contributor access
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown URL parameter in all versions up to, and including, 2.4.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Related
cvelist
cvelist
CVE-2024-1291
2024-03-13 15:27:27
nvd
nvd
CVE-2024-1291
2024-03-13 16:15:18
wpvulndb
wpvulndb
cve
cve
CVE-2024-1291
2024-03-13 16:15:18
wordfence
wordfence